Last updated: 14 de abril de 2026

Why we process your personal data.

The personal data we process is always collected for a specific purpose, in accordance with Article 5 of the GDPR, and for a specific processing, after which it is anonymized or destroyed. The purposes of the processing are as follows:

1. Compliance with legal obligations that apply to us, whether to customers and suppliers, or to our employees, under Article 6(1)(c) of the GDPR;
2. The execution of contracts or for pre-contractual due diligence within the scope of our activity, under Article 6(1)(b) of the GDPR;
3. To perform the services we provide, we obtain the consent of the data subject, pursuant to Article 6(1)(a) of the GDPR;
4. Based on legitimate interest, under Article 6(1)(f) of the GDPR, namely in communication with clients and potential clients, suppliers, and in the recruitment of employees.

Legality of processing your personal data

Amora Brava's commercial activity involves the processing of personal data whenever it provides services. The lawfulness of these operations is guaranteed under Article 6 of the GDPR, and may take the following forms:

1. As a subcontractor for a client, where the client, as the data controller, transmits personal data to us so that we can contact them;
2. In cases where Amora Brava is itself responsible for the processing, having obtained the data subject's consent in a prior and recorded manner.

What we do with your data at the end of the treatment.

The personal data used serves exclusively for the purposes described, therefore, once the processing operation is completed, we proceed to anonymize the records or destroy them completely, in accordance with Article 5, paragraph 1, point e) of the GDPR.

Retention period

We only retain personal data for the period necessary to fulfill the purposes for which it was collected, in accordance with Article 5(1)(e) of the GDPR. In cases where longer retention is required by law, the data will be anonymized.

Security

Information security and the protection of personal data are a priority for Amora Brava, in accordance with Article 32 of the GDPR. We ensure adequate protection measures and guarantee that the third-party entities we use are contractually bound and ensure adequate data protection. Access to personal data is limited to employees directly involved in processing operations. All personal data is stored in secure systems, audited and subject to periodic testing.

In the event of a personal data breach, Amora Brava will notify the National Data Protection Commission (CNPD) within a maximum of 72 hours after becoming aware of the occurrence. Whenever the breach is likely to involve a high risk to data subjects, they will also be informed without undue delay, in accordance with Article 34 of the GDPR.

We respect the confidentiality of the personal data we process, ensuring that we do not disclose, distribute, or make it available to third parties, except in the specific performance of a contracted service to support the services we provide.

Exercise of the rights of the data subjects.

In accordance with Articles 15 to 22 of the GDPR, as a data subject, you may exercise the following rights:

• Access — You can request access to the information we hold about you;
• Rectification — you can request the correction of inaccurate or incomplete information;
• Erasure — You may request the erasure of your data when it is no longer necessary for the purpose for which it was collected, in accordance with Article 17 of the GDPR;
• Withdrawal of consent — has the right to withdraw their consent at any time, without this affecting the lawfulness of the processing carried out previously;
• Limitations and opposition to treatment — In accordance with Articles 18 and 21 of the GDPR, you may request the restriction of, or object to, the processing of your data in certain circumstances.

The data subject may also, at any time, request the deletion of their user account, which will imply the erasure of all associated personal data, except for data that must be retained due to legal requirements.

Requests can be submitted using the contact information available on this website and will be processed within a maximum of 30 days, as stipulated in Article 12 of the GDPR. This period may be extended by a further two months in cases of particular complexity. You may be asked to provide proof of identity to ensure that data is only shared with its owner.

You still have the right to lodge a complaint with National Data Protection Commission (CNPD), located at Rua de São Bento, n.º 148-3º, 1200-821 Lisbon, through the website www.cnpd.pt.

Cookies

This section of the policy is drafted under the Law No. 41/2004, of August 18, amended by Law No. 46/2012, of August 29, which transposes the ePrivacy Directive and the GDPR into national law.

What are cookies?

Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. These files allow the website to recognize your device on future visits and remember certain information about your browsing, such as preferences or items added to your shopping cart. Cookies do not contain viruses and cannot access other files on your device.

What types of cookies are there?

Cookies can be classified according to their origin, duration, and purpose:

As for origin:

• Own cookies — installed directly by the website you are visiting;
• Third-party cookies — installed by external entities, such as analytics platforms or social networks, through the website you visit.

As for duration:

• Session cookies — Temporary files are automatically deleted when you close your browser;
• Persistent cookies — They remain on your device for a defined period, even after you close your browser, until they expire or are manually deleted.

As for purpose:

• Strictly necessary cookies — essential for the basic functioning of the website, such as maintaining the session or the shopping cart. They do not require consent under Law No. 41/2004;
• Preference (functional) cookies — allow the site to remember your choices, such as language or region, to provide a personalized experience;
• Analytical or performance cookies — They collect anonymous information about how users navigate the site, with the aim of improving its functionality;
• Marketing and advertising cookies — used to present relevant ads based on user interests and to measure the effectiveness of advertising campaigns;
• Social media cookies — They allow you to share content on social media and can record your visit to the site for advertising purposes.

Cookies we use

Strictly necessary cookies — do not require prior user consent under Law No. 41/2004:

• Session cookies (login) — They keep the session active between pages, being removed when the session ends, ensuring the security of restricted areas;
• Shopping cart cookies — They ensure that items added to the cart are retained during browsing, allowing for correct order processing;
• Form cookies — They temporarily store the information submitted in forms, preventing data loss in case of error;
• User account cookies — manage the registration, authentication, and general administration process of the user account;
• Security cookies — used to detect and prevent fraudulent or malicious activities, protecting the user and the website.

Non-essential cookies — require your prior, express and informed consent, in accordance with Article 5 of Law No. 41/2004 and Article 6, paragraph 1, point a) of the GDPR:

• Google Analytics — We use Google Analytics to understand how the site is used and to improve the user experience. These cookies may record, for example, the time spent on the site or the pages visited. The data collected is anonymous and aggregated. For more information, please see Google's privacy policy at policies.google.com;
• Newsletter cookies — used to manage the subscription status of newsletters and email communications, showing or hiding notifications according to the user's subscription status;
• Preference cookies — They store user preferences, such as language or content layout, to provide a personalized experience on future visits;
• Conversion and performance cookies — They collect statistics related to purchases and browsing behavior to support marketing, advertising, and pricing decisions;
• Testing and improvement cookies — used during testing of new features or design changes, ensuring a consistent experience and allowing users to measure which changes are most valued;
• Survey cookies — used to remember who has already responded to satisfaction surveys or to ensure consistent results after navigating between pages.

How to manage cookies

Pode gerir ou desativar os cookies a qualquer momento através das definições do seu navegador. Consulte a secção de “Ajuda” do seu navegador para instruções específicas. Tenha em atenção que a desativação de determinados cookies poderá limitar funcionalidades deste site, nomeadamente ao nível da autenticação, do carrinho de compras ou da personalização da experiência de navegação.

You can also opt out of being tracked by Google Analytics by going to tools.google.com/dlpage/gaoptout.

Final considerations

A presente Política de Privacidade e Cookies pode ser atualizada a qualquer momento, sendo as alterações publicadas nesta página com indicação da data de última atualização. Recomendamos a consulta periódica deste documento. Para qualquer questão relacionada com o tratamento dos seus dados pessoais ou com a utilização de cookies, pode contactar a Amora Brava através dos contactos disponíveis neste site.